Privacy Policy

1. Information we collect

We collect information you provide directly (such as your name, email, and messages), information generated as you use our tools, and data from third-party services you choose to connect. When you link an accounting or payment provider (for example QuickBooks Online or Payoneer), we receive transaction, balance, and reporting data from that provider so we can display and reconcile it for you.

2. How we use it

We use the information to operate and improve our services, display your financial dashboards, provide support, and keep the services secure. We do not sell your personal information.

3. Third-party integrations

Data obtained through a connected integration is used solely to provide the feature you requested (such as showing your transactions in a dashboard). We access only the scopes you authorise, and you can revoke access at any time through the provider or by disconnecting the integration, after which we stop retrieving new data.

4. LinkedIn data

Where a client authorises our LinkedIn integration, we access LinkedIn data only through LinkedIn’s official APIs and only for the LinkedIn Pages and advertising accounts that the client has explicitly shared with Saura Agency. We read organic post content and engagement statistics, Page follower and visitor analytics, advertising account, campaign and creative data and their performance reports, and the basic profile of the authorising member (name, profile picture, LinkedIn identifier and email address) solely to identify the connected account. We also publish and schedule posts on behalf of a Page when the client asks us to.

This data is used exclusively to manage and report on the marketing we deliver for that client. We do not sell LinkedIn data, we do not share it with third parties, we do not use it for advertising targeting outside the client’s own advertising accounts, and we do not use it to train machine learning models.

LinkedIn access tokens are encrypted at rest with AES-256-GCM on our servers in Germany, are never written to logs and are never returned by any of our endpoints. Retrieved LinkedIn content and analytics are retained only while the connection is active. A client may revoke access at any time by removing the permission in LinkedIn Settings or by asking us to disconnect the account; on revocation we stop retrieving data, delete the stored tokens immediately and delete the cached LinkedIn data within 30 days. A deletion request can also be sent to the contact address at the end of this policy.

5. Storage and security

We store data on secured infrastructure and restrict access to authorised personnel. Access tokens and secrets are kept in protected server configuration, never exposed publicly. No system is perfectly secure, but we take reasonable measures to protect your information.

6. Data retention

We keep information for as long as needed to provide the services or as required by law. You may request deletion of your data, subject to any legal retention obligations.

7. Your rights

You may request access to, correction of, or deletion of your personal information, and you may withdraw a connected integration’s access at any time.

8. Changes

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

9. Contact

For privacy questions or requests, contact hello@sauragency.com.